This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft File: mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json) Hash identifier: vxs5cGVlsBynTNCq3mHqW6/hu/vnUTGBH5EWH6JwE7A= Subject key identifier: 87:F6:1A:D9:A2:19:58:98:09:6E:DA:17:D6:51:E7:EF:B7:98:34:8F Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a Certificate serial: 019B3CB52A3017EC4FCFF3E4931B11947C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=) 2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=) 3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: XEWcTh1YQifCc3ACipLM/vQb2FuPJ+FY/73oAsc4ddo=) 4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=) 5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2a:30:17:ec:4f:cf:f3:e4:93:1b:11:94:7c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=87f61ad9a2195898096eda17d651e7efb798348f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:6f:9a:bf:46:76:7a:cc:7a:ba:18:df:5c: 0d:35:b7:32:8b:a4:c4:cb:de:ab:58:2c:19:87:75: 46:62:87:7e:10:fd:9d:a8:e5:8f:65:ca:18:5a:49: 18:d5:98:d8:20:42:ea:29:84:3a:aa:74:4c:45:1f: ed:38:fc:c7:c6:12:e9:a4:83:c9:57:65:b3:42:5c: 95:68:46:df:09:22:6e:21:08:b5:ee:dd:73:b8:fa: 41:d9:a5:f9:cf:bc:41:0c:3c:f7:5d:ad:00:9b:d7: 9a:69:2a:5c:90:7b:ed:20:97:5a:19:0a:21:55:f8: 4a:0e:67:c8:5a:6b:31:51:31:c5:d5:7a:5b:68:53: 3b:a7:c4:ce:c1:69:43:68:a2:db:dd:b3:52:58:c8: 15:00:cf:4f:6a:fb:8c:79:f2:94:23:c1:71:81:46: 2d:89:f0:f1:fe:e6:3d:d7:a9:23:91:90:a9:bb:22: d5:96:65:89:56:d1:60:ea:fb:ff:b3:b1:e8:b1:01: 77:35:8a:a1:0d:93:66:78:d5:de:f9:8f:05:6b:17: be:e9:7f:ef:be:6f:4c:a6:d7:ce:d4:f5:65:7f:88: bb:9e:64:ff:c9:6b:f2:e8:89:be:2f:b6:50:4d:f5: ac:dd:39:79:67:c6:e2:1d:db:3d:0c:5d:2c:41:a2: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:1A:D9:A2:19:58:98:09:6E:DA:17:D6:51:E7:EF:B7:98:34:8F X509v3 Authority Key Identifier: keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:8d:e6:96:c8:d1:4a:ba:cf:c3:2c:24:7d:81:8d:be:fb: 71:43:79:f1:e7:47:36:ae:e5:84:d1:15:0b:6a:bf:28:55:36: 8c:5c:26:1d:c3:54:5a:36:60:0d:49:92:24:9c:e1:7e:4b:3e: 13:42:a7:60:54:9f:5e:18:09:b0:5c:bd:f3:bb:73:12:d7:6a: 24:c8:d1:1d:14:f4:b5:78:3c:c8:a3:80:f4:6e:ed:8f:0b:af: 57:49:4a:2f:88:b2:60:f8:f3:d1:ad:95:97:77:0a:89:01:ef: 64:5e:b9:a5:6a:9b:dc:59:fa:08:39:3a:6b:f4:48:aa:2f:59: 87:4c:88:22:8d:cb:43:50:21:c6:36:43:06:20:ab:f9:5e:ab: cf:b1:5d:0c:e3:fd:83:7c:cb:10:e2:e9:7e:32:a0:21:c8:fa: 67:a4:d1:e1:d4:cc:8d:8d:9e:d8:72:01:81:7d:9b:39:69:bf: a9:b7:66:1b:7e:2b:53:74:15:c0:66:c8:0e:03:dd:e7:63:aa: 8c:a1:58:35:38:4a:5b:34:a2:e3:70:7f:f3:26:82:1f:b3:10: 5e:57:86:c4:9e:e4:78:ca:b7:03:55:51:47:25:a0:73:f2:a9: a4:e7:25:87:57:d1:43:65:e3:d0:a0:5c:8a:b8:1f:d4:5c:2f: e8:0e:0f:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSowF+xPz/PkkxsRlHyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz NmM0NWEwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD Eyg4N2Y2MWFkOWEyMTk1ODk4MDk2ZWRhMTdkNjUxZTdlZmI3OTgzNDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojVvmr9GdnrMeroY31wNNbcyi6TE y96rWCwZh3VGYod+EP2dqOWPZcoYWkkY1ZjYIELqKYQ6qnRMRR/tOPzHxhLppIPJ V2WzQlyVaEbfCSJuIQi17t1zuPpB2aX5z7xBDDz3Xa0Am9eaaSpckHvtIJdaGQoh VfhKDmfIWmsxUTHF1XpbaFM7p8TOwWlDaKLb3bNSWMgVAM9PavuMefKUI8FxgUYt ifDx/uY916kjkZCpuyLVlmWJVtFg6vv/s7HosQF3NYqhDZNmeNXe+Y8Faxe+6X/v vm9MptfO1PVlf4i7nmT/yWvy6Im+L7ZQTfWs3Tl5Z8biHds9DF0sQaIbhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf2GtmiGViYCW7aF9ZR5++3mDSPMB8GA1UdIwQY MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt MTM5OWEyODIyMjdhLzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOKN5pbI 0Uq6z8MsJH2Bjb77cUN58edHNq7lhNEVC2q/KFU2jFwmHcNUWjZgDUmSJJzhfks+ E0KnYFSfXhgJsFy987tzEtdqJMjRHRT0tXg8yKOA9G7tjwuvV0lKL4iyYPjz0a2V l3cKiQHvZF65pWqb3Fn6CDk6a/RIqi9Zh0yIIo3LQ1AhxjZDBiCr+V6rz7FdDOP9 g3zLEOLpfjKgIcj6Z6TR4dTMjY2e2HIBgX2bOWm/qbdmG34rU3QVwGbIDgPd52Oq jKFYNThKWzSi43B/8yaCH7MQXleGxJ7keMq3A1VRRyWgc/KppOclh1fRQ2Xj0KBc irgf1Fwv6A4P3w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:57 2025 by rpki-client